Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 1124089" data-attributes="member: 32260">It is hard to recommend a solution to security-oriented guys. <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite109" alt=":)" title="Smile&nbsp; &nbsp; :)" loading="lazy" data-shortname=":)" />The first problem is whether you can live with your current setup (SAC enabled).The default Windows 11 built-in setup + SAC + Core Isolation + slightly hardened Edge and Firewall is enough for most people.There are many possible ways to make this setup stronger, but then you are trying to fight the malware that will probably never attack your computer.Here is a possible route, if you would like to test step by step the limits of your abilities:<ol>
<li data-xf-list-type="ol">FirewallHardening (Recommended H_C).</li>
<li data-xf-list-type="ol">FirewallHardening (Recommended H_C) + ConfigureDefender HIGH.</li>
<li data-xf-list-type="ol">FirewallHardening (Recommended H_C) + ConfigureDefender HIGH + WHHLight (default SWH settings).</li>
<li data-xf-list-type="ol">FirewallHardening (Recommended H_C) + ConfigureDefender MAX + WHHLight (default SWH settings).</li>
<li data-xf-list-type="ol">etc. (additional tweaking, DocumentsAntiExploit).</li>
<li data-xf-list-type="ol">Hard_Configurator</li>
</ol>Hard_Configurator includes FirewallHardening, ConfigureDefender, and DocumentsAntiExploit. The Recommended Settings in Hard_Configurator + ConfigureDefender + FirewallHardening + DocumentsAntiExploit are probably the upper limit (still usable) for MT members. Hard_Configurator can apply more restrictive setting profiles, but such restrictions are intended for special cases.</blockquote>

[QUOTE="Andy Ful, post: 1124089, member: 32260"] It is hard to recommend a solution to security-oriented guys. :) The first problem is whether you can live with your current setup (SAC enabled). The default Windows 11 built-in setup + SAC + Core Isolation + slightly hardened Edge and Firewall is enough for most people. There are many possible ways to make this setup stronger, but then you are trying to fight the malware that will probably never attack your computer. Here is a possible route, if you would like to test step by step the limits of your abilities: [LIST=1] [*]FirewallHardening (Recommended H_C). [*]FirewallHardening (Recommended H_C) + ConfigureDefender HIGH. [*]FirewallHardening (Recommended H_C) + ConfigureDefender HIGH + WHHLight (default SWH settings). [*]FirewallHardening (Recommended H_C) + ConfigureDefender MAX + WHHLight (default SWH settings). [*]etc. (additional tweaking, DocumentsAntiExploit). [*]Hard_Configurator [/LIST] Hard_Configurator includes FirewallHardening, ConfigureDefender, and DocumentsAntiExploit. The Recommended Settings in Hard_Configurator + ConfigureDefender + FirewallHardening + DocumentsAntiExploit are probably the upper limit (still usable) for MT members. Hard_Configurator can apply more restrictive setting profiles, but such restrictions are intended for special cases. [/QUOTE]

Verification